F
2FA - Two-Factor Authentication (Method of system authentication using two authentication methods or factors. The term "Two-factor authentication" was used because only two factors were used and has been replaced by "multifactor authentication." Factor types generally involved "something you know," such as a username and password, "something you have," such as a smart card or token, or "something you are," such as a biometric characteristic, such as a fingerprint or eye retina pattern. Using two factors of the same type, such as a username and password, is considered single-factor authentication.)
FaaS - Function-as-a-Service (Cloud service in which the provider delivers a platform which the customer/client uses to create and run their own applications.)
FAIR - Factor Analysis of Information Risk (Risk model developed by the FAIR Institute which provides a framework for quantitatively assessing risk basedom specific probabilities of loss from specific kinds of threats.)
FAM - file activity monitor (Security control tool which monitors system file activity for large data migration (transfers of a large number of files or large amounts of data) or unusual activity.)
FAR - false acceptance rate (The level of errors generated by a biometric system in which unauthorized users or unknown individuals are mistakenly identified and authenticated, and allowed entry. The term "false acceptance rate" is similar to the term "false positive rate" (FPR), although it is generally associated with biometric system errors, whereas FPR is likely to be used to describe error rates in other (non-biometric) detection systems.)
FAST - Federation Against Software Theft (Organization promoting the enforcement of software proprietary rights.)
FDCC - Federal Desktop Core Configuration (Secure configuration standards for government agencies in the use of operating systems, Web browsers, and other computer workstation features.)
FDE - full disk encryption (Computer/system protection method in which an entire disk is encrypted.)
FEA - Federal Enterprise Architecture (A business-based framework for government-wide improvement developed by the Office of Management and Budget (OMB) that is intended to facilitate efforts to transform the federal government into an organization that is citizen-centered, results-oriented, and market-based.)
FEAF - Federal Enterprise Architecture Framework (A model intended to bring consistency among federal agencies in the implementation and operation of Federal Enterprise Architecture (FEA) by providing guidance for the design, development, and operation of federal information systems.)
Fed CIRC - Federal Computer Incident Response Capability (The ability of federal agencies to respond to adverse events, attacks, or disruptions impacting computer and information systems, including identification, mitigationg, and recovery capabilities.)
Fed RAMP - Federal Risk and Authorization Management Program (A multi-agency collaborative program providing a process for cloud service providers to attain certification of their compliance with FISMA (Federal Information Security Management Act) requirements and receive security authorization. Once certified, they can be listed for federal agencies interested in using cloud services on system projects.)
FinCEN - Financial Crimes Enforcement Network (Bureau of the U.S. Treasury Department established in 1990 to provide a government-wide, multisource financial intelligence and analysis network - in 1994 its operations were broadened when it was given regulatory responsibility for administering the Bank Secrecy Act)
FININT - Financial Intelligence (Financial information related to the targeted organization or individual, such as acquisitions, quarterly financial reports, bank statements, or SEC filings.)
FIPS - Federal Information Processing Standard(s) (Standards to be used by federal agencies in evaluating and developing federal information systems, other than national security systems.)
FISMA - Federal Information Security Management Act of 2002 (Title III of the E-Government Act) (Federal law requiring federal agencies to create, document, and implement an agency-wide security program to provide protection for the information and information systems that support the operations and assets of the agency, including those of other agencies and contractors.)
FMEA - Failure Modes and Effect Analysis (A methodology commonly used in product development or operational environments, which involves a determination of product functions, identifying functional failures, and assessing the causes of failure, and their failure effects, using a structured process, with the goal of identifying weaknesses and fixing flaws before they happen.)
FNR - false negative rate (In a malware detection system, or any security system, the percentage of incorrect detections/identifications saying malware was not malware (or benign) when it was in fact malicious (acceptance of activity which turned out to be malicious or failure to warn of or act on intrusions which occured).)
FPR - false positive rate (In a malware detection system, or any security system, the percentage of incorrect detections/identifications (warnings of malicious activity which was not malicious or warnings of intrusions which did not occur).)
FQDN - Fully Qualified Domain Name (A website address written as, or consisting of, a series of strings (programming term for sequences of printable characters) delimited by a period. In practical terms, it is simply the fully spelled out address for a website - "www.mywebsite.com" or "www.agency.gov")
FRAP - Facilitated Risk Analysis Process (Risk assessment methodology which focuses only on the systems considered most in need of assessing in order to reduce costs and time obligations. It stresses prescreening activities and relies more on team members' experience, than probability calculations, to determine the criticality and priority of risks chosen for assessment.)
FRR - False Rejection Rate (The level of errors generated by a biometric system in which authorized users or known individuals are mistakenly rejected and denied entry. The term "false rejection rate" is similar to the term "false negative rate" (FNR), although it is generally associated with biometric system errors, whereas FNR is likely to be used to describe error rates in non-biometric detection systems.)
FWaaS - Firewall-as-a-service (Cloud-based firewall service, usually provided on a subscription basis, which serves as an alternative, or in addition to a firewall installed on a system network.)
FURPS - Functionality, Usability, Reliability, Performance, Supportability (Summary of the primary requirements, or core considerations needed in an information system.)